Privacy policy
Last updated: October 13, 2026
This policy explains what data FoodyOS collects on foodyos.com and the application hosted at app.foodyos.com, how we use it, and who we share it with. It applies to all of our markets — Venezuela, Colombia, Brazil, Guatemala and the United States.
1. What we collect
- Data you give us. When you fill out the demo or contact form: name, email, phone, restaurant name, country, number of locations, and the message you send.
- Browser data. IP, user-agent, referrer and time of visit — for diagnostics and protecting the site from spam.
- Usage data, only if you accept analytics cookies. Pages viewed, clicks and scrolling, and recordings of how a page is used (Google Analytics and Microsoft Clarity), tied to an identifier for your browser. The cookie list has the detail.
- Operational data from your restaurant (only if you become a platform customer): menus, orders, WhatsApp conversations with your customers, inventory and staff data. Stored in your isolated tenant.
2. How we use it
- Reply to your sales and support requests.
- Operate the platform modules your restaurant turns on (WhatsApp AI, cashier, kitchen, inventory, etc.).
- Improve the site and the product with visit statistics and, if you accept analytics cookies, recordings of how pages are used. These are tied to a browser identifier: they are pseudonymous, not anonymous.
- Comply with legal obligations (billing, audits, lawful requests).
3. What we don’t do
- We don’t sell your data, and we run no advertising. One tool on this site, Microsoft Clarity, belongs to a company that also runs an advertising business. It loads only if you accept analytics cookies, and when it loads Microsoft may set its own cookies. The cookie list names each one.
- We don’t use your tenant’s data to train global AI models.
- We don’t send marketing email unless you’ve subscribed.
4. Service providers
We use carefully selected providers to run the platform:
- Google Cloud / Firebase — infrastructure, database, authentication, hosting.
- Meta (WhatsApp Business API) — official messaging channel.
- Anthropic — AI models for the ordering assistant.
- Cloudflare — DNS and edge protection. It sets one security cookie, cf_clearance, before any choice.
- Google Analytics and Microsoft Clarity — site statistics and session recordings, only after you accept analytics cookies.
5. SMS / text messaging program
FoodyOS operates SMS messaging programs on behalf of restaurants that subscribe to our marketing or transactional texting modules. US recipients only see SMS from a restaurant after the restaurant obtains express written consent through the restaurant’s storefront double-opt-in checkbox or another equivalent capture point that complies with the Telephone Consumer Protection Act (TCPA).
- Opt-in. You may receive SMS messages from a restaurant only after you explicitly opt in. The restaurant records your consent timestamp, the IP address you opted in from, and the language of the consent disclosure shown to you.
- Message types. Order confirmations, delivery tracking and loyalty receipts are transactional. Promotions, specials and re-engagement messages are marketing. Each restaurant may operate one or both message categories.
- Message frequency. Up to 4 marketing messages per week per restaurant program. Transactional messages are sent as orders are placed and updated.
- Reply STOP to opt out. Reply
STOP(alsoUNSUBSCRIBE,CANCEL,ENDorQUIT) at any time to any SMS from a FoodyOS-powered restaurant to immediately stop receiving further messages from that restaurant. We confirm the opt-out with one final message and record it permanently. - Reply HELP for help. Reply
HELP(orINFO) for support contact information. - Carriers. Carriers are not liable for delayed or undelivered messages.
- Message and data rates. Message and data rates may apply, depending on your mobile plan.
- Eligibility. SMS programs are available to US residents 18 years of age or older.
- SMS data sharing. Mobile information collected for SMS opt-in and consent will not be shared with third parties for marketing or promotional purposes. Information sharing is limited to subprocessors that operate the messaging infrastructure (currently Twilio Inc.) and as required by law.
6. Email program
Marketing emails are sent only to recipients who opted in via the restaurant’s subscription form or storefront. Every marketing email includes a one-click unsubscribe link plus the List-Unsubscribe header per CAN-SPAM. Transactional emails (order confirmations, password resets) are not subject to the marketing opt-out and are sent as part of the service.
7. Retention
Form leads are retained for 24 months or until you ask us to delete them. Restaurant operational data is retained while the account is active and deleted 90 days after closure — except for encrypted backups that rotate every 30 days.
8. Your rights
You can request access, correction, portability or deletion of your data by emailing [email protected]. We respond within 30 days. California residents have additional rights under the CCPA; we honor verifiable consumer requests at the same address.
9. Contact
Data controller: FoodyOS, a service of Clariont LLC. Mailing address: 1019 Wisteria Way, Dundee, FL 33838, United States. Questions or complaints: [email protected]. For SMS support, reply HELP to any FoodyOS-powered restaurant message or email [email protected].
Cookies and measurement
This is exactly what runs on foodyos.com, measured with a real browser. Neither the Google Analytics script nor the Microsoft Clarity script is downloaded before you accept analytics cookies. Two things run before you choose, and neither needs a choice: Cloudflare’s security cookie, cf_clearance, and Cloudflare’s count of page views, which sets no cookie.
| Tool | What it does | When it runs | Storage and retention |
|---|---|---|---|
| Cloudflare (security) | Cloudflare sits in front of this site and checks that a visitor is a real browser and not a bot. | On every visit, before any choice. Strictly necessary. | One cookie, cf_clearance, lasting about 1 year. It is in the cookie list below. |
| Cloudflare Web Analytics | Aggregate page views and visits. | Always. It needs no consent because it sets no cookies and uses no cross-site identifier. | This measurement sets no cookie and keeps no persistent identifier. |
| Google Analytics 4 (G-GXW7T7JT2Z) | Aggregate site usage: page views, form submissions, clicks on our contact channels. | Only after you accept the analytics category. It is not downloaded before that. | _ga and _ga_GXW7T7JT2Z cookies in your browser. We delete them if you withdraw consent. Data retention at Google: 14 months. Google Signals is off and advertising signals are permanently denied. |
| Microsoft Clarity (project ywqj580li8) | Session recordings and heatmaps: how the page is used (pointer movement, clicks, scrolling and the page as it was shown). What you type into a form field is masked: Clarity masks input boxes in every mode. | Only after you accept the analytics category. It is not downloaded before that, and never with Global Privacy Control. | _clck and _clsk cookies on foodyos.com, Microsoft’s own cookies on clarity.ms and bing.com (listed below), and one sessionStorage entry, _cltk, for the open tab. Microsoft keeps recordings for 30 days; favorites and a random sample for up to 9 months, and heatmaps for up to 9 months. |
| Cloudflare Turnstile | Bot protection on the demo request form. | When the contact form loads. Strictly necessary to prevent spam. | Managed by Cloudflare as a security measure. We measured no additional cookie when it loads, and one localStorage entry, cf.turnstile.u, which Cloudflare keeps on its own address (challenges.cloudflare.com). |
| Google reCAPTCHA Enterprise (Firebase App Check) | Checks that a form is being sent by a real browser before it is saved. | Only when you send a form (demo request or newsletter). It does not load when you view a page. | Google says it sets a necessary cookie, _GRECAPTCHA, when it runs. We have not measured it ourselves, because that would mean sending a real form. |
| foodyos_consent_v1 | Remembers your cookie decision. | When you accept or decline. | First-party localStorage (not a cookie). Stores your choice, the notice version and the timestamp. Persists until you clear it. |
| foody-region | Remembers which region you selected (LatAm, US, Brazil). | When you switch region. | First-party localStorage. Persists until you clear it. |
Every cookie, by name
This is the full list of cookies a fresh browser receives on foodyos.com, before and after a choice. The first arrives before any choice. Every other one exists only if you accept analytics cookies, with Accept all or with Save choices and Analytics ticked. This is what browsing sets: sending a form also runs Google reCAPTCHA, which is in the table above.
| Cookie | Who sets it, on which domain | Purpose | Lifetime | When |
|---|---|---|---|---|
cf_clearance | Cloudflare, on foodyos.com | Security and bot protection. It stores the proof that your browser passed Cloudflare’s automatic check, so the check is not repeated. It is not used for analytics or advertising. | About 1 year | On your first page, before any choice. Strictly necessary. |
_ga, _ga_GXW7T7JT2Z | Google Analytics, on foodyos.com | Tell one browser from another and one visit from the next, for aggregate statistics. | Up to 400 days | Only if you accept. We delete them if you withdraw consent. |
_clck | Microsoft Clarity, on foodyos.com | Keeps the ID Clarity gives your browser on this site, so visits are attributed to the same browser. | 1 year | Only if you accept. We delete it if you withdraw consent. |
_clsk | Microsoft Clarity, on foodyos.com | Joins the pages you view in one visit into a single recording. | 1 day | Only if you accept. We delete it if you withdraw consent. |
CLID | Microsoft, on www.clarity.ms | Identifies the first time Clarity saw this browser on any site that uses Clarity. | 1 year | Set by Microsoft when the Clarity script loads, so only if you accept. |
MUID | Microsoft, on clarity.ms and on bing.com | Microsoft’s identifier for your browser across Microsoft sites. Microsoft says these cookies are used for advertising, site analytics, and other operational purposes. | About 13 months | Set by Microsoft when the Clarity script loads, so only if you accept. |
MR | Microsoft, on c.clarity.ms and on c.bing.com | Tells Microsoft whether to refresh MUID. | 7 days | Set by Microsoft when the Clarity script loads, so only if you accept. |
SM | Microsoft, on c.clarity.ms | Used to synchronize MUID across Microsoft’s domains. | Until you close the browser | Set by Microsoft when the Clarity script loads, so only if you accept. |
ANONCHK | Microsoft, on c.clarity.ms | Indicates whether MUID is transferred to ANID, a Microsoft advertising cookie. Microsoft says Clarity does not use ANID and that this is always set to 0. | 10 minutes | Set by Microsoft when the Clarity script loads, so only if you accept. |
SRM_B | Microsoft (Bing), on c.bing.com | Set by Bing during the sync call described below. Microsoft’s published list of Clarity cookies does not describe it. | About 13 months | Set by Microsoft when the Clarity script loads, so only if you accept. |
Microsoft Clarity and Microsoft’s cookies
Clarity is a Microsoft product. When its script loads, Microsoft sets its own cookies on its own domains (clarity.ms and bing.com), which are the ones in the list above, and the script calls a Bing address (c.bing.com) that copies Microsoft’s identifier for your browser between those two domains. Microsoft may use that identifier for its own purposes, including advertising.
We run no advertising, and we tell Clarity that advertising storage is denied. Microsoft’s cookies in the list are set all the same: that is what we measured, so that is what this page says.
None of this happens unless you accept analytics cookies. If you decline, if your browser sends Global Privacy Control, or if you make no choice, the Clarity script is never requested and none of those cookies exist. If you accept and later withdraw, we stop Clarity and delete its two cookies on foodyos.com. In the few seconds after you withdraw, Clarity sends what it had already recorded and Google Analytics may send what it had already measured. After that neither sends anything, and neither loads on the next page. The cookies on Microsoft’s domains are outside our reach: you can delete them in your browser’s settings. Recordings already sent stay with Microsoft until they expire: Clarity gives us no way to delete one visitor’s recording.
How to change your decision
You can change or withdraw consent at any time, from any page:
If this notice changes in a way that matters, as it did in October 2026 when Microsoft Clarity was added to the analytics category, an acceptance given under the earlier notice no longer counts: nothing in the analytics category loads and we ask you again. A refusal stays in force and is not asked again.
Global Privacy Control
If your browser sends the Global Privacy Control (GPC) signal we honor it automatically: every optional category is denied, the banner is not shown to you, and the decision is recorded as coming from GPC.
Privacy contact
Questions about personal data or this policy: [email protected]
Cookie section last updated: October 13, 2026